Authentication Required

Multi-tenant package or setting users and groups?

I was researching and I would like to know if exist a difference between multi-tenant package and use users and groups to separate domains. I went through the multi-tenant package code and I didn't see any architectural design difference like using one instance for each tenant.